70-640 Windows Server 2008 Active Directory - Exam A

Description

Quiz on 70-640 Windows Server 2008 Active Directory - Exam A, created by marklherrmann3 on 19/05/2015.
marklherrmann3
Quiz by marklherrmann3, updated more than 1 year ago
marklherrmann3
Created by marklherrmann3 almost 9 years ago
107
2

Resource summary

Question 1

Question
Your company has a main office and a branch office. The network contains an Active Directory domain that runs Windows Server 2008 servers. The main office contains a writable domain controller named S1. The branch office contains a read-only domain controller (RODC) named B2. You discover that the password of an administrator named Jake is cached on B2. You need to prevent Jake's password from being cached on DC2. What should you do?
Answer
  • Modify the properties of the domain
  • Create a Password Setting object (PSO)
  • Modify the properties of B2's computer account
  • Modify the NTDS Site Settings

Question 2

Question
Your company has file servers located in an organizational unit named Payroll. The file servers contain payroll files located in a folder named Payroll. You create a GPO. You need to track which employees access the Payroll files on the file servers. What do you do?
Answer
  • Enable the Audit object access option. Link the GPO to the domain. On the domain controllers, configure Auditing for the Authenticated users group in the Payroll folder
  • Enable the Audit process tracking option. Link the GPO to the Domain Controllers organizational unit. On the file servers configure Auditing for the Authenticated User group in the Payroll folder
  • Enable the Audit object access option. Link the GPO to the Payroll OU. On the file servers, configure Auditing of the Everyone group in the Payroll folder
  • Enable the Audit process tracking option. Link the GPO to the Payroll OIU. On the file servers configure Auditing for the Everyone group in the Payroll folder

Question 3

Question
You are the network administrator for TechSkills. The network consists of a single Active Directory domain named TechSkills.com All network servers run Windows Server 2008, and all client computers run Windows XP Professional. A user named Patricia has just left the company. A replacement will be hired in one month. The replacement will need the same access to network resources that Patricia currently has. The replacement will also need ownership of all files that currently res Patricia's home folder. You need to minimize the administrative effort that will be required when the replacement is hired. You also need to ensure that no one can use Patricia's user account to log on to the domain until the replacement is hired. What should you do?
Answer
  • Delete Patricia's user account
  • Configure Patricia's user account to require a change in password at next logon
  • Move Patricia's user account to the LostAndFound organizational unit (OU)
  • Disable Patricia's user account

Question 4

Question
Your company network consists of a single Windows 2008 Active Directory domain. You are a member of the Domain Admins group. The network includes three member servers running Windows Server 2003 and two domain controllers running Windows Server 2008. The 50 client computers all run Windows XP Professional. The user accounts for employees in the Finance department are located in an Organizational Unit (OU) named Finance. The Finance OU also contains a Global Security group named FinanceUsers. All Finance employees are members of FinanceUsers. An employee named Sandy works in the Finance department. Sandy reports that she cannot log in the domain. She receives the error message. "Unable to log you on because your account has been locked out. Please see your system administrator." You need to enable Sandy to log in to the domain. What should you do?
Answer
  • Perform an authoritative restore of Sandy's user account
  • Use the DSMOD USER command line tool to enable Sandy's user account
  • Use Active Directory Users and Computers to add Sandy's user account to the Domain Users group
  • Use the NET ACCOUNTS command line tool to enable Sandy's user account
  • Use Active Directory Users and Computers to add Sandy's user account to the Guests group

Question 5

Question
Your company has a network with Active Directory Forest with a single domain. Windows Server 2008 installed on all domain controllers and they are configured as DNS servers. The domain has an Active Directory-integrated zone with two Active Directory sites. Each site contains three domain controllers. You added a new NS record to the zone. What should you do to make sure all domain controllers immediately receive the new NS record?
Answer
  • Execute repadmin /syncall from the command prompt
  • Shutdown and then restart the DNS server service from services snap-in
  • Reload the zone from the DNS Manager console
  • Create an SOA record from the DNS Manager console

Question 6

Question
You are the network administrator for the RealApps network. You want to export all Active Directory information. What command do you use?
Answer
  • ldifde -f c:\allparameters.ldf
  • ldifde -p c:\allparameters.ldf
  • ldifde -p c:\allparameters.csv
  • ldifde -f c:\allparameters.csv

Question 7

Question
You need to relocate the existing user and computer objects in your company to different organizational units. What are two possible ways to achieve this goal? (Each correct answer presents a complete solution. Choose two)
Answer
  • Run the Dsmove utility
  • Run the Active Directory Migration Tool (ADMT)
  • Run the Active Directory Users and Computers utility
  • Run the move-item command in the Microsoft Windows PowerShell utility

Question 8

Question
Rick is creating the backup strategy for Active Directory Lightweight Directory Services (AD LDS) to ensure that data and log files are backed up regularly. This will also ensure the continued availability of data to applications and users in the event of failure. Rick only has limited media resources. What he can he do to backup only a specific AD LDS instance instead of backing up the entire volume?
Answer
  • Use Windows Server backup utility and enable the checkbox to take only the backup of the database and log files of AD LDS
  • Use dsdbutil.exe to create installation media that corresponds only to the AD LDS instance
  • Move the AD LDS database and log files on a separate volume and use the Windows Server backup utility
  • Purchase a third party software to take care of the backup process

Question 9

Question
You are the network administrator for TechSkills.com. The network consists of a single Active Directory forest that contains two domains. The functional level of the forest is Windows 2000 native servers run Windows 2008. You create a group named Marketing. The Marketing group includes users from both domains. You need to use the Marketing group to assign permissions to resources in both domains. However, when you attempt to assign permissions to a shared folder by using the Marketing group, you receive an error message that states that an object named "Marketing" cannot be found. You need to ensure that Marketing group can be used to assign permissions to shared resources in both domains. What should you do?
Answer
  • Upgrade the forest functional level to Windows Server 2003
  • Modify the group properties to make the group a domain local security group
  • Modify the group properties to make the group a universal security group
  • Modify the group properties to make the group a global distribution group
  • Upgrade the domain functional level for both domains to Windows Server 2008

Question 10

Question
You are the network administrator for TechSkills. The network consists of a single Active Directory domain named TechSkills.com. TechSkills also uses a DNS namespace named 2K8Techlabs.local. Users in the sales department log on by using their e-mail addresses. A user named Barbara Jones works for the sales department. She reports that when she attempts to log on using bjones@TechSkills.com, she receives the error message saying: "The system could not log you on. Make sure your user name and domain are correct, and then try typing your password again. Letters in passwords must be typed using the correct case." You need to ensure the Barbara can log on by using a username that matches her e-mail address. What should you do?
Answer
  • Configure Barbara's user account to require a smart card for interactive logon
  • Under the "User logon name" option, change the User Principal Name (UPN) for Barbara's account
  • Configure Barbara's user account to be trusted for delegation
  • Change the "Log On To" option for Barbara's account
Show full summary Hide full summary

Similar

Y11 SACE Biology Ecology Flash Cards
Ben Goetze
Geography Coasts Questions
becky_e
French Module 1 'Moi'
Maya Khangura
Attachment - Psychology - Flash Cards
Megan Price
mcolby MITOSIS TEST
Melinda Colby
Chemistry unit 2
36jessieh
GCSE Biology B1 (OCR)
Usman Rauf
GCSE Core Chemistry Yr 9
bronwyn831
EOY Revision of Year 8 - Science
Luca Cameron
DEV I Part I
d owen
Repaso Revalida PR 2016
Leticia Ortiz del Moral